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An identifier indicating the status of each claim is provided. 



1 . (Previously Presented) A transmitting apparatus for transmitting a layer 
structure of a directory which manages public key certificate information in a layer manner, 
comprising: 

managing means for making certificate authority information correspond to a 
container entry which can store its own subordinate information,: making end entity information 
correspond to a leaf entry which is under domination of said container entry and cannot store its 
own subordinate information, and managing a layer structure of a directory constructed by said 
container entry and said leaf entry; 

first detecting means for detecting a change of said layer structure of said 
directory which is managed by said managing means and obtaining first differential information 
constructed by a difference of the change of the layer structure of said directory; 

second detecting means for detecting a change of said end entity information of 
said leaf entry which is managed by said managing means and obtaining second differentia] 
information constructed by a difference of the change of end entity information of said leaf 
entry; and 

broadcasting means fbT broadcasting said first differential information detected by 
said first detecting means and said second differential information detected by said second 
detecting means, 
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wherein information which can obtain latest public? key certificate information and 
lapse information of said latest public key certificate information We stored into said container 
entry and/or said leaf entry at a predetermined time interval, and 

wherein said lapse information includes a method of obtaining said latest public 
key certificate information. 

2- (Original) An apparatus according to claim 1, wherein said lapse information is 

i 

a serial number of said public key certificate information. 

i 

3. (Original) An apparatus according to claim 1, wherein one of said latest public 
key certificate information and the information for obtaining said Latest public key certificate 
information can be selected and stored into attributes of said container entry and/or said leaf 
entry, 

4. (Original) An apparatus according to claim 3, wherein the information which is 
stored into said attributes can be changed between said latest public key certificate information 

i 

and the information for obtaining said latest public key certificate information in accordance 
with an elapsed time from an updating event in which said difference has been detected by said 
detecting means. ; 

| 

5. (Previously Presented) A transmitting method|of transmitting a layer structure 

i 

of a directory which manages public key certificate informatioii in a layer manner, comprising: 



| 
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a managing step of making certificate authority intimation correspond to a 
container entry which can store its own subordinate information, Wking end entity infoimation 
•espond to a leaf entry which is under domination of said container entry and cannot store its 
subordinate information, and managing a layer structure of J directory constructed by said 



com 
own 

container entry and said leaf entry, 



i 



a first detecting step of detecting a change of saidjlayer structure of said directory 
which is managed by said managing step and obtaining first differential information constructed 
by a difference of the change of said layer structure of said directory; and 

a second detecting step for detecting a change of said end entity information of 

said leaf entry which is managed by said managing step and obtaining second differential 

i 

information constructed by a difference of the change of end entity information of said leaf 

J 

entry, ! 

i 

a transmitting step of transmitting said first differential information detected by 

! 

said first detecting step and said second differential information jdetected by said second 

i 
I 

detecting step, j 

wherein information which can obtain latest pubjic key certificate information and 

lapse information of said latest public key certificate information are stored into said container 

entry and/or said leaf entry at a predetermined time interval, and 

wherein said lapse information includes amethocl of obtaining said latest public 

i 
» 

key certificate information. J 
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6. (Previously Presented) A receiving apparatus fo? receiving a transmitted layer 

structure of a directory which manages public key certificate information in a layer manner, 

r 

comprising: ] 

receiving means for making transmitted certificate? authority information 

correspond to a container entry which can store its own subordinate information, making end 

i 

entity information correspond to a leaf entry which is under domination of said container entry 

it 

and cannot store its own subordinate information, and receiving first differential information 
comprising a difference of a change of a layer structure of a directory which is constructed by 

i 
1 

said container entry and said leaf entry and obtained on the basisjof a detection result obtained by 

j' 

detecting the change of said layer structure of said directory, andjreceiving second differential 

Y 

information comprising a difference of a change of end entity information of said leaf entry; 

I 

managing means for managing said layer structure of said directory constructed 

I 

on the basis of said first differential information and said secondjdifferential information 



received by said receiving means; and j 

*. 

changing means for selectively fetching said first^differential information and said 

}. 

second differential information and changing said layer structure of said directory which is 

\ 

managed by said managing means, j 

r 

wherein information which can obtain latest public key certificate information and 

i 

J 

lapse information of said latest public key certificate information are stored into said container 
entry and/or said leaf entry and transmitted at a predetermined time interval, and 

wherein said lapse information includes a method of obtaining said latest public 

i 

key certificate information. 

» 

i 
i 

r 
i 
i 

i 

! 

j. 
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i 

7. (Original) An apparatus according to claim 6, ^heroin said lapse information is 
a serial number of said public key certificate information. I 

j 

8. (Original) An apparatus according to claim 6, \jberein said changing means 

j* 

selectively fetches updating information of said container entry apd/or said leaf entry 

!■ 

corresponding to a certificate information pass for obtaining saidjpublic key certificate 
information. j 

9. (Previously Presented) A receiving method of receiving a transmitted layer 
structure of a directory which manages public key certificate information in a layer manner, 
comprising: 

a receiving step of making transmitted certificate'jauthority information 

correspond to a container entry which can store its own subordinate information, making end 

I 

entity information correspond to a leaf entry which is under domination of said container entry 

■i 



and cannot store its own subordinate information, and receivingjfirst differential information 



comprising a difference of a change of a layer structure of a directory which is constructed by 
said container entry and said leaf entry and obtained on the basis of a detection result obtained by 

! 

detecting the change of said layer structure of said directory, and receiving second differential 

i ( 

information comprising a difference of a change of end entity information of said leaf entry; 



a managing step of managing said layer structure 

i 



of said directory constructed on 



the basis of said first differential information and said second differential information received 
by said receiving step; and 
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a changing step of selectively fetching said first differential information and said 
second differential information and changing said layer structure of said directory which is 

managed by said managing step, 

wherein information which can obtain latest public key certificate information and 
lapse information of said latest public key certificate infonnationjare stored into said container 
entry and/or said leaf entry and transmitted at a predetermined tir le interval, and 

wherein said lapse information includes a methodj of obtaining said latest public 
key certi ficate information, 

10. (Previously Presented) A transmitting and recjpiving system for transmitting a 
layer structure of a directory which manages public key certificate information in a layer manner 
and receiving the transmitted layer structure of said directory, cc mprising: 

first managing means for making certificate auth< ffity information correspond to a 
container entry which can store its own subordim .to information, making end 
entity information correspond to a leaf entry which is under don mation of said container entry 

and cannot store its own subordinate information, and managing :a layer structure of a directory 

i 

constructed by said container entry and said leaf entry; : ' 

i < 

first detecting means for detecting a change of sa id layer structure of said 
directory which is managed by said first managing means and obtaining first differential 

information constructed by a difference of the change of said la rer structure of said directory; 

i 

second detecting means for detecting a change o ' said end entity information of 
said leaf entry which is managed by said managing means and ( btaining second differential 
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y said second detecting means; 



differential information and said 



infoimation constmcted by a difference of the change of end entity information of said leaf 
entry; 

transmitting means for transmitting said first differential information detected by 
said first detecting means and said second differential detected t 

receiving means for receiving said first differential information and said second 
differential information transmitted by said transmitting means; ; 

second managing means for managing said layer structure of said directory 
constructed on the basis of said first differential information ana said second differential 
information received by said receiving means; and 

changing means for selectively fetching said firs 
second differential information and changing said layer structurp of said directory which is 
managed by said second managing means, 

wherein information which can obtain latest pttbiic key certificate information and 

entry and/or said leaf entry at a predetermined time interval, and 

wherein said lapse information includes a methop of obtaining said latest public 
key certificate information. 

11. (Original) A system according to claim 10, if herein said lapse information is a 
serial number of said public key certificate information. 

12. (Original) A system according to claim 10, ^herein one of said latest public 
key certificate information and the information for obtaining sid latest public key certificate 
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information can be selected, stored into attributes of said contairfer entry and/or said leaf entry, 
and transmitted. 

1 3. (Original) A system according to claim 12, w lerein the information which is 

i 

stored into said attributes can be changed between said latest public key certificate information 
and the information for obtaining said latest public key certificat e information in accordance 
with an elapsed time from an updating event in which said difference has been detected by said 
detecting means and transmitted. 



14. (Original) A system according to claim 10, wherein said changing means 
selectively fetches updating information of said container entry and/or said leaf entry 
corresponding to a certificate information pass for obtaining saia public key certificate 
information. 

15. (Previously Presented) A transmitting and re< ;eiving method of transmitting a 
layer structure of a directory which manages public key certificate information in a layer manner 
and receiving the transmitted layer structure of said directory, c< Jmprising: 

i 

a first managing step of making certificate autho ity information correspond to a 

u 

container entry which can store its own subordinate infotmatior , making end entity information 
correspond to a 1 eaf entry which is under domination of said cor Ltainer entry and cannot store its 
own subordinate information, and managing a layer structure oif a directory constructed by said 
container entry and said leaf entry; 
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a first detecting step of detecting a change of said flayer structure of said directory 



which is managed by said first managing step and obtaining firs 
constructed by a difference of the change of said layer structure 
a second detecting step for detecting a change of p 
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; differential information 
\>f said directory; 
aid end entity information of 



said leaf entry which is managed by said managing means and d st ain i n g second differential 
information constructed by a difference of the change of end entity information of said leaf 
entry; 

a transmitting step of transmitting said first diffe bntial information detected by 
said first detecting step and said second differential information [detected by second detecting 
step; 

a receiving step of receiving said first differential information and said second 
differential information transmitted by said transmitting step; 

a second managing step of managing said layer s Lucture of said directory 
constructed on the basis of said first differential information ai^l said second differential 
information received by said receiving step; and 

a changing step of selectively fetching said first differential information and said 
second differential information and changing said layer structui e of said directory which is 
managed by said second managing step, 

wherein information which can obtain latest public key certificate information and 
lapse information of said latest public key certificate infonnatic q are stored into said container 
entry and/or said leaf entry at a predetermined time interval, an L 

wherein said lapse information includes a methc i of obtaining said latest public 
key certificate information. 
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